Determine if security incidents are indicative of a violation of law that requires specific legal action